داستان از این قراره ...
Access-based enumeration
Access-based enumeration allows users to see only the files and folders in an SMB-based shared folder to which they have permission to access. If a user does not have Read permissions for a folder, Windows hides the folder from the user’s view. This is useful for shared folders that contain many users’ home directories, for example.
To enable access-based enumeration on a shared folder
- In Share and Storage Management, right-click the appropriate shared folder and then click Properties.
- On the Sharing tab, click Advanced.
- Select the Enable access-based enumeration checkbox and then click OK.
Additional considerations
- Granting a user Full Control NTFS permission on a shared resource enables that user to take ownership of the folder or volume, unless the user is restricted in some other way. Be cautious in granting Full Control.
- If you want to manage folder and volume access by using NTFS permissions exclusively, set share permissions to Full Control for Everyone. This simplifies management of share permissions, but NTFS permissions are more complex than share permissions.
- NTFS permissions affect both local and remote access. NTFS permissions apply regardless of protocol. Share permissions, by contrast, apply only to shared network resources. Share permissions do not restrict access of any local user or terminal server user. Thus, share permissions do not provide privacy between users on a computer that is used by several users.
- By default, the Everyone group does not include the Anonymous group, so permissions applied to the Everyone group do not affect the Anonymous group.
- You cannot modify the access permissions of folders or volumes that are shared for administrative purposes, such as C$ and ADMIN$.
- To open Share and Storage Management, click Start, point to Administrative Tools, and then click Share and Storage Management.